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Description 

FIELD OF THE INVENTION 

[0001] The present invention relates generally to fuel 
management systems for use with motor vehicles and 
particularly to a wireless system for authorization and 
monitoring of fuel delivery according to the preamble of 
claim 1. 

BACKGROUND OF THE INVENTION 

[0002] Fuel management systems which monitor fuel 
usage by vehicles and record the identity and other par- 
ticulars of vehicles being fueled are known. Patents 
showing fuel management systems include the follow- 
ing U.S. Patents: 5,156,198; 4,934,419; 4,846,233; 
4,469,149; 4,263,945; 4,109,686 and 3,642,036. In ad- 
dition, PCT published patent application WO 95/14612 
describes a vehicle mounted fueling system identifica- 
tion unit which employs an inductive communication 
loop arranged to surround a fuel intake pathway of a ve- 
hicle. Circuitry is provided which transmits, via the loop, 
various parameters, such as vehicle identification 
number, credit information, and required fuel particulars. 
[0003] A drawback-to prior art systems is that they re- 
quire wired connections to transmit the fuel/vehicle pa- 
rameters. 

[0004] European Patent Application 0 736 484 dis- 
closes a fluid delivery apparatus associated with a fluid 
delivery nozzle for wireless communication to either an 
active or a passive device located on a vehicle and for 
wireless communication from the fluid delivery appara- 
tus to a central location for storage of vehicle data. 

SUMMARY OF THE INVENTION 

[0005] The present invention seeks to provide a wire- 
less system for authorization and monitoring of fuel de- 
livery with improved theft-safety features. 
[0006] There is thus provided in accordance with the 
present invention a fueling system as defined by claim 1 . 
[0007] In accordance with a preferred embodiment of 
the present invention the authorization and monitoring 
assembly is also operative to communicate in a wireless 
manner with the fuel supply subsystem to authorize sup- 
ply of fuel to the recipient. 

[0008] Further in accordance with a preferred embod- 
iment of the present invention the fueling communicator 
communicates with at least one of the authorization and 
monitoring assembly and the recipient identifier in an 
encrypted manner. 

[0009] Still further in accordance with a preferred em- 
bodiment of the present invention the fueling communi- 
cator communicates with at least one of the authoriza- 
tion and monitoring assembly and the recipient identifier 
in a manner requiring authentication by at least one of 
the authorization and monitoring assembly and the re- 
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cipient identifier. 

[0010] Additionally in accordance with a preferred 
embodiment of the present invention the recipient iden- 
tifier is mounted at the fill location of the recipient fuel 
5 store at least partially by means of an anti-theft tag in- 
cluding a monitored attachment mechanism which at- 
taches the tag to the fill location of the fuel store and 
which provides an output indication of tampering with 
the attachment mechanism. 

10 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0011] The present invention will be understood and 
appreciated more fully from the following detailed de- 
15 scription, taken in conjunction with the drawings in 
which: 

Fig. 1 A is a simplified illustration of a fueling system 
constructed and operative in accordance with a pre- 
20 ferred embodiment of the present invention embod- 
ied in a filling station; 

Fig. 1 B is a more detailed illustration of components 
of the fueling system of Fig. 1 A; 
Fig. 2 is a simplified sectional illustration of an anti- 
25 theft tag used to mount certain components of the 
fueling system of Fig. 1 in accordance with, the 
present invention; and 

Fig. 3 is a simplified illustration of a fueling system 
different from the present invention embodied in 
30 mobile fueling system. 

DETAILED DESCRIPTION OF A PREFERRED 
EMBODIMENT 

35 [0012] Reference is now made to Figs. 1A and 1B 
which illustrate a fueling system 10 constructed and op- 
erative in accordance with a preferred embodiment of 
the present invention embodied in a filling station 12. 
[0013] Fueling system 10 includes a fuel supply sub- 

40 system 14 which includes one or more fueling nozzles 
16. In Fig. 1B, one of the fueling nozzles 16 is being 
used to supply fuel to a fuel intake pipe 18 of a fuel tank 
20 of a vehicle 21 , herein referred to as a fill location 18 
of a recipient fuel store 20. A recipient identifier 22 is 

45 provided in association with fill location 18. Recipient 
identifier 22 is preferably mounted inside vehicle 21 in 
propinquity to fill location 18. Recipient identifier 22 pref- 
erably comprises a transceiver for wirelessly communi- 
cating recipient identification information to a fueling 

50 communicator 24 which is mounted on fueling nozzle 
16. Typical recipient identification information may in- 
clude vehicle license plate number, charge account 
number and credit status, for example. 
[0014] Fueling communicator 24 comprises a trans- 

55 ceiver for wirelessly communicating data, such as the 
recipient identification information, to an authorization 
and monitoring assembly 26. Assembly 26 preferably 
includes a transceiver 28 which communicates with a 
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CPU 30 which controls and manages operation of filling 
station 12. 

[001 5] A typical example of operation of fueling sys- 
tem 10 is as follows. Nozzle 16 is initially inserted in fill 
location 18. Recipient identifier 22 is activated, such as 
by the insertion of nozzle 16 or by some other mecha- 
nism, to wirelessly transmit the recipient identification 
information to fueling communicator 24. Fueling com- 
municator 24 relays this information to assembly 26. Up- 
on verification of the information by CPU 30, transceiver 
28 of assembly 26 preferably wirelessly communicates 
with fuel supply subsystem 1 2 to authorize supply of fuel 
to vehicle 21. 

[001 6] In accordance with a preferred embodiment of 
the present invention, in order to increase communica- 
tion security, fueling communicator 24 communicates 
with assembly 26 and/or recipient identifier 22 in an en- 
crypted manner. For example, well known encryption al- 
gorithms, such as RC-5, DES or DVB, may be em- 
ployed. To provide an even greater level of trust, mutual 
zero-knowledge interaction authentication sessions be- 
tween fueling communicator 24, assembly 26 and/or re- 
cipient identifier 22 may be held, such as the so-called 
Fiat-Shamir authentication methods taught in US Patent 
4,748,668 to Shamir and Fiat. 

[0017] As one example, fueling communicator-24 may - 
communicate with assembly 26 in a manner requiring 
authentication by recipient identifier 22. Additionally or 
alternatively, fueling communicator 24 may communi- 
cate with assembly 26 only upon authorization from as- 
sembly 26 itself. Similarly, fueling communicator 24 may 
communicate with recipient identifier 22 in a manner re- 
quiring authentication by assembly 26. Additionally or 
alternatively, fueling communicator 24 may communi- 
cate with recipient identifier 22 only upon authorization 
from recipient identifier 22 itself. 
[0018] In accordance with the present invention 
fueling communicator 24 is mounted onto nozzle 16 at 
least partially by means of an anti-theft tag 32 including 
a monitored attachment mechanism 34 which attaches 
tag 32 to nozzle 16 and which provides an output indi- 
cation of tampering with attachment mechanism 34. 
[0019] Reference is now made to Fig. 2 which illus- 
trates tag 32. Tag 32 is a tag of the type described in 
applicant/assignee's US Patent 6,002,343. Tag 32 pref- 
erably includes electronics (not shown) comprising a 
battery, a receiver antenna, receiver circuitry, a trans- 
mitter antenna, transmitter circuitry, a microprocessor, 
a timer, a logic and memory component, an analog-to- 
digital (A/D) converter and a current source, for exam- 
ple. The electronics of tag 32 is not limited to the above- 
mentioned components, and may include more or less 
components, depending upon the application. 
[0020] The electronics of tag 32 are in electrical com- 
munication with an electrically resistive element 34, 
such as via I/O pads 36. Resistive element 34 is prefer- 
ably bonded to a nozzle 16 with an adhesive 42 so as 
to define an electrical resistance. Any change in bonding 



of element 34 to nozzle 16 causes a change in the elec- 
trical resistance. Adhesive 42 may be a double sided 
adhesive tape or adhesive foam. 
[0021] Resistive element 34 may be constructed in a 

5 variety of manners, as taught in US Patent 6,002,343. 
For example, resistive element 34 may be printed in any 
suitable pattern to provide a desired resistance value 
which may be adjusted after curing by laser trimming, 
abrasion or mechanical punching, for example. Resis- 

10 tive element 34 is preferably attached to tag 32 by 
■ means of a conductive adhesive 50, such as a metal 
impregnated adhesive. Preferably the adhesive 
strength of adhesive 42 is greater than the adhesive 
strength of conductive adhesive 50, so that removal of 

15 tag 32 from nozzle 16 causes shearing or other defor- 
mation of conductive adhesive 50, and alters the resist- 
ance of resistive element 34. Alteration of the resistance 
of element 34 may then alert fueling system 1 0 of tam- 
1 pering with the system. 

20 [0022] Similarly, recipient identifier 22 may be mount- 
ed at fill location 18 by means of anti-theft tag 32. 
[0023] Reference is now made to Fig. .3 which illus- 
trates a fueling system 60 different from the present in- 
vention embodied in mobile fueling system. Fueling sys- 

25 tern 60 is substantially identical with fueling system 10, 
- -except that in fueling. system 60, theiill location.is a fuel 
intake pipe 62 and the recipient fuel store is a fuel tank 
64 of a domicile. Fueling communicator 24 is mounted 
in a cabin or on top of a fuel delivery truck. 

30 

Claims 

1. A fueling system (10, 60) comprising: 

35 

a fuel supply subsystem (14) including at least 
one fueling nozzle (16); 
a recipient identifier (22) associated with a fill 
location (18, 62) of a recipient fuel store (20, 

40 64); 

a fueling communicator (24) associated with 
said at least one fueling nozzle (16) and com- 
municating in a wireless manner with said re- 
cipient identifier (22), at least in order to obtain 

45 recipient identification information therefrom; 

and 

an authorization and monitoring assembly (26) 
operative to communicate in a wireless manner 
with said fueling communicator (24) for receiv- 

50 jng at least recipient identification information 

therefrom; characterized by 

said fueling communicator (24) being 
mounted onto said at least one nozzle (16) at 
least partially by means of an anti-theft tag (32) 

55 including a monitored attachment mechanism 

(34) which attaches the tag (32) to said at least 
one nozzle (16) and which provides an output 
indication of tampering with said attachment 
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mechanism (34); and 

an electrically resistive element in electri- 
cal communication with and attached to said 
tag (32), wherein tampering with the electrically 
resistive element causes a change in said elec- 5 
trical resistance, said change in electrical re- 
sistance being communicated to said tag (32), 
wherein said resistive element comprises a 
multiplicity of resistive wires, wherein only a 
random number of said wires are electrically w 
connected to internal connection points in said 
tag (32) such that said resistive element has a 
statistically random electrical resistance. 

2. The fueling system (10, 60) according to claim 1 fur- 1 5 
ther characterized in that said authorization and 
monitoring assembly (26) is also operative to com- 
municate in a wireless manner with said fuel supply 
subsystem (14) to authorize supply of fuel to said 

fill location (18, 62). 20 

3. The fueling system (10, 60) according to claim 1 fur- 
ther characterized in that said fueling communica- 
tor (24) communicates with at least one of said au- 
thorization and monitoring assembly (26) and said 25 
recipient identifier (22) in an encrypted manner. - - 

4. The fueling system (10, 60) according to claim 1 fur- 
ther characterized in that said fueling communica- 
tor (24) communicates with at least one of said au- 30 
thorization and monitoring assembly (26) and said 
recipient identifier (22) in a manner requiring au- 
thentication by at least one of said authorization and 
monitoring assembly (26) and said recipient identi- 
fier (22). 35 

5. The fueling system (1 0, 60) according to claim 1 fur- 
ther characterized in that said recipient identifier 
(22) is mounted at said fill location (18, 62) of said 
recipient fuel store (20, 64) at least partially by *o 
means of an anti-theft tag (32) including a moni- 
tored attachment mechanism (34) which attaches 

the tag (32) to said fill location (18, 62) of said fuel 
store (20, 64) and which provides an output indica- 
tion of tampering with said attachment mechanism *5 
(34). 

Patentanspruche 

50 

1. Tanksystem (10, 60), das umfasst: 

ein Kraftstoffabgabe-Teilsystem (14), das we- 
nigstens einen Tank-Zapfhahn (16) enthalt; 

55 

eine Empfanger-ldentifizierungseinrichtung 
(22), die mit etner Fullposition (18, 62) eines 
Empfanger-Kraftstoffspeichers (20, 64) ver- 



bunden ist; 

eine Tank-Obertragungseinrichtung (24), die 
mit dem wenigstens einen Tank-Zapfhahn (16) 
verbunden ist und mit der Empfanger-ldentifi- 
zierungseinrichtung (22) drahtlos in Obertra- 
gungsverbindung steht, urn wenigstens Emp- 
fanger-ldentifizterungsinformationen von dte- 
ser zu beziehen; und 

eine Autorisierungs-und-Oberwachungs-An- 
ordnung (26), die mit der Tank-Obertragungs- 
einrichtung (24) drahtlos in Obertragungsbe- 
ziehung tritt, urn wenigstens Empfanger-lden- 
tifizierungsinformationen von dieser zu emp- 
fangen; dadurch gekennzeichnet, dass: 

die Tank-Obertragungseinrichtung (24) an 
dem wenigstens einen Zapfhahn (16) we- 
nigstens teilweise mittels eines Diebstahls- 
verhinderungs-Schildes (32) angebracht 
ist, das einen uberwachten Anbringungs- 
mechanismus (34) enthalt, der das Schild 
(32) an dem wenigstens einen Zapfhahn 
(16) halt und der bei unbefugtem Manipu- 
lieren an dem Anbringungsmechanismus 
(34) eine Ausgabeanzeige erzeugt; und . 

ein elektrisches Widerstandselement, das 
mit dem Schild (32) in elektrischer Verbin- 
dung steht und daran angebracht ist, wobei 
unbefugtes Manipulieren an dem elektri- 
schen Widerstandselement eine Verande- 
rung des elektrischen Widerstandes be- 
wirkt und die Veranderung des elektri- 
schen Widerstandes zu dem Schild (32) 
ubertragen wird, wobei das Widerstands- 
element eine Vielzahl von Widerstands- 
drahten umfasst und lediglich eine zufallk 
ge Anzahl der Drahte etektrisch an innere 
Anschlusspunkte in dem Schild (32) ange- 
schlossen sind, so dass das Widerstands- 
element einen statistisch zufalligen elektri- 
schen Widerstand hat. 

2. Tanksystem (10, 60) nach Anspruch 1, des Weite- 
ren dadurch gekennzeichnet, dass die Autorisie- 
rungs-und-Oberwachungs-Anordnung (26) des 
Weiteren mit dem Kraftstoffabgabe-Teilsystem (14) 
drahtlos in Ubertragungsbeziehung tritt, urn die Ab- 
gabe von Kraftstoff zu der Fullposition (18, 62) zu 
autorisieren. 

3. Tanksystem (10, 60) nach Anspruch 1, des Weite- 
ren dadurch gekennzeichnet, dass die Tank- 
Obertragungseinrichtung (24) wenigstens mit der 
Autorisierungsund-Uberwachungs-Anordnung (26) 
oder der Empfanger-ldentifizierungseinrichtung 
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(22) verschlusselt in Ubertragungsbeziehung steht. 

4. Tanksystem (10, 60) nach Anspruch 1, des Weite- 
ren dadurch gekennzeichnet, dass die Tank- 
Obertragungseinrichtung (24) wenigstens mit der 5 
Autorisierungsund-Uberwachungs-Anordnung (26) 
oder der Empfanger-ldentifizierungseinrtchtung 
(22) auf eine Weise in Ubertragungsbeziehung be- 
steht, die Authentifizierung wenigstens durch die 
Autorisierungs-und-Uberwachungs-Anordnung 10 
(26) oder die Empfanger-ldentifizierungseinrich- 
tung (22) erfordert. 

5. Tanksystem (10, 60) nach Anspruch 1, des Weite- 
ren dadurch gekennzeichnet, dass die Empfan- *s 
ger-ldentifizierungseinrichtung (22) an der Full-Po- 
sition (18, 62) des Empfanger-Kraftstoffspeichers 
(20, 64) wenigstens teilweise mtttels eines Dieb- 
stahlverhinderungs-Schildes (32) angebracht ist, 
das einen uberwachten Anbringungsmechanismus 20 
(34) enthalt, der das Schild (32) an der Full-Position 
(18, 62) des Kraftstoffspeichers (20, 64) halt und 
der bei unbefugtem Manipulieren an dem Anbrin- 
gungsmechanismus (34) eine Ausgabeanzeige er- 
zeugt. 25 



Revendications 

1. Systeme d'alimentation en carburant (10, 60), 30 
comprenant : 

un sous-systeme (14) de transmission de car- 
burant qui comprend au moins un pistolet (16) 
d'alimentation en carburant, 35 
un identificateur (22) de recepteur, associe a 
un emplacement (18, 62) de remplissage d'une 
reserve receptrice de carburant (20, 64), 
un organe de communication (24) d'alimenta- 
tion en carburant associe au pistolet au moins *o 
(16) d'alimentation en carburant et communi- 
quant sans fil avec Pidentificateur (22) de re- 
cepteur, au moins pour I'obtention depuis celui- 
ci d'informations d'identification de recepteur, 
et 45 
un ensemble d'autorisation et de controle (26) 
destine a communiquer sans fil avec I'organe 
(24) de communication d'alimentation en car- 
burant pour la reception depuis celui-ci au 
moins des informations d'identification de re- so 
cepteur, caracterise par 
le montage de I'organe (24) de communication 
d'alimentation en carburant sur au moins un 
pistolet (16) partiellement au moins avec une 
etiquette antivol (32) qui comprend un meca- 55 
nisme controle de fixation (34) qui fixe ('etiquet- 
te (32) au pistolet au moins (16) et qui donne 
une indication en sortie sur une falsification du 



mecanisme de fixation (34), et 
un element electriquement resistif place en 
communication electrique avec I' etiquette (32) 
et fixe a celte-ci, et tel qu'une falsification de 
('element electriquement resistif provoque un 
changement de resistance electrique, le chan- 
gement de resistance electrique etant commu- 
nique a ('etiquette (32), I'element resistif com- 
prenant plusieurs fits res ist its tels qu'un nombre 
aleatoire seulement de fils est connecte elec- 
triquement a des points internes de connexion 
dans I'etiquette (32), si bien que ('element re- 
sistif a une resistance electrique statistique- 
ment aleatoire. 

2. Systeme d'alimentation en carburant (10, 60) selon 
la revendication 1 , caracterise en outre en ce que 
I'ensemble d'autorisation et de controle (26) est 
aussi destine a communiquer sans fil avec le sous- 
systeme de transmission de carburant (14) pour 
autoriser la transmission du carburant a I'emplace- 
ment de remplissage (18, 62). 

3. Systeme d'alimentation en carburant (10, 60) selon 
la revendication 1 , caracterise en outre en ce que 
I'organe (24) de communication d'alimentation en 
carburant communique de maniere cryptee avec au 
moins I'ensemble d'autorisation et de controle (26) 
ou I'identificateur de recepteur (22). 

4. Systeme d'alimentation a carburant (10, 60) selon 
la revendication 1, caracterise en outre en ce que 
I'organe (24) de communication d'alimentation en 
carburant communique avec au moins I'ensemble 
d'autorisation et de controle (26) ou I'identificateur 
de recepteur (22) d'une maniere qui necessite une 
authentication par au moins un ensemble d'auto- 
risation et de controle (26) et I'identificateur de re- 
cepteur (22). 

5. Systeme d'alimentation en carburant (1 0, 60) selon 
la revendication 1 , caracterise en outre en ce que 
I'identificateur de recepteur (22) est monte a I'em- 
placement de remplissage (18, 62) de la reserve de 
carburant du recepteur (20, 64) au moins partielle- 
ment par une etiquette antivol (32) qui comporte un 
mecanisme controle de fixation (34) qui fixe I'eti- 
quette (32) a I'emplacement de remplissage (18, 
62) de la reserve de carburant (20, 64) et qui donne 
une indication en sortie relative a la falsification du 
mecanisme de fixation (34). 
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FIG. 2 
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